On Mar. 26, 2025, SWE PRL announced bill 2024/25:88 was adopted by the house.
Issued report 2024/25:KU12 proposing approval of new rules to counteract failure or slow processing of certain complaint cases by the SWE DP.
GDPR and Data Protection Dir state there will be one or more authorities in each State responsible for monitoring how they are applied and now SWE PRL has approved new rules to counteract failure or slow processing of certain complaints by SWE DP.
New rules intend to prevent SWE DP from failing to process a complaint or processing it too slowly when person submitted complaint regarding processing of personal data.
Per new rules, a person who filed complaint will have right to request a response after 3 months, SWE DP will then 2 weeks to respond and the response will state if it will conduct an inspection or not; SWE DP's decision will be subject to appeal.
The House approved the bill based on the committee's proposal for approval decision.
According to approved text, new rules, once published, will enter into force on May 1.
SWE MoJ announced referral of memorandum JU2024/00708 on delayed action in the Data Protection Act and Criminal Data Act to several bodies (listed) for consultation.
Overview
It is proposed the law supplementary to EU's GDPR and the Criminal Data Act include provisions on claim for delay in the event of SWE DP's delay or inaction.
After 3 months from time complaint submitted to SWE DP, a person can request to be notified if it intends to initiate supervision or not, if no notification already provided.
Supervisor has 2 weeks to provide information or reject request in reasoned decision.
If does not notify or make decision within that time, request shall be deemed rejected.
It is proposed the supervisor's decision can be appealed to the Administrative Court.
This also applies in case of a rejection decision, which shall be deemed to have been made if notification is not given within the specified time limit.
The Administrative Court shall, if it considers supervisor should be able to submit a statement on the supervisory issue, instruct it to do so as soon as possible.
Effectiveness
Referral response to be received by Ministry of Justice by May 20, 2024 at the latest.
The changes to the law are proposed to enter into force on Jan. 1, 2025.
Nov. 2024 Delayed Action Legal Remedy
On Nov. 8, 2024, SWE MoJ issued legal remedy (PDF) in Data Protection Act (DPA) and Criminal Data Act (CDA) by SWE DPA against non-delivery or slow processing.
New remedy confirms that a data subject shall have the right to request information as to whether or not the supervisory authority intends to initiate supervision.
This is after 3 months from date on which complaint was lodged with SWE DPA.
The legislative amendments are proposed to enter into force on Apr. 1, 2025.
Mar. 2025 SWE PRL Update
On Mar. 26, 2025, SWE PRL announced bill 2024/25:88 was adopted by the house.
Issued report 2024/25:KU12 proposing approval of new rules to counteract failure or slow processing of certain complaint cases by the SWE DP.
GDPR and Data Protection Dir state there will be one or more authorities in each State responsible for monitoring how they are applied and now SWE PRL has approved new rules to counteract failure or slow processing of certain complaints by SWE DP.
New rules intend to prevent SWE DP from failing to process a complaint or processing it too slowly when person submitted complaint regarding processing of personal data.
Per new rules, a person who filed complaint will have right to request a response after 3 months, SWE DP will then 2 weeks to respond and the response will state if it will conduct an inspection or not; SWE DP's decision will be subject to appeal.
The House approved the bill based on the committee's proposal for approval decision.
According to approved text, new rules, once published, will enter into force on May 1.
Regulators
SWE DP; SWE MoJ; SWE PRL
Entity Types
CNSM; Corp
Reference
Rp 2024/25:KU12, PR, 3/26/2025; Bill 2024/25:88, Prop, PR, 11/8/2024; Memo, Ju2024/00708, PR, 3/22/2024; Data Protection Act; Criminal Data Act; GDPR Reg 2016/679
